YOUR DATA & YOUR CHOICES
Privacy policy.
What stays on your device, what we store, and how to contact us about your information.
Last updated: October 5, 2026
Who this policy covers
This policy covers the SmartImageTools.com website and its image tools. For privacy questions, corrections or deletion requests, use our contact page. Provide enough information to locate the relevant account or message without including a password or sensitive image.
Image files and tool results
Image editing, conversion, watermark removal, OCR, background removal and upscaling run in your browser. Image files are not uploaded to our server for processing. The files you choose, working previews and generated outputs are handled on your device. Downloading a result saves it through your browser.
Some tools first download software or AI models. Upscaling models and OCR resources are served from this site; background-removal resources are downloaded from IMG.LY’s resource host, staticimgly.com. Resource hosts receive normal network information such as your IP address and request headers. This is a resource download, not an upload of your image. Your browser may cache these resources.
Optional accounts
If you register, we store your name, email address and a password hash. We use this information to provide sign-in and account features. Authentication uses an HTTP-only auth_token cookie. You do not need an account to use any image tool or calculator.
Usage metadata and security
Some tools send numeric usage metadata: tool name, file size, pixel dimensions and processing time. New processing events do not include the original filename, image pixels, IP address or browser user agent. When you are signed in, an event can be associated with your account so you can see your activity.
New processing events expire after 30 days and are removed during normal usage or maintenance. Legacy records collected under the earlier policy can remain until the site owner reviews them. Rate limiting stores keyed identifiers rather than raw addresses; expired entries are removed during maintenance. Hosting and resource providers may maintain network or security logs under their own policies.
Contact messages
When you use the contact form, we store your message and the optional name and email you provide. A message may be associated with your account if you are signed in. New contact messages do not store an IP address. We use messages to respond to questions, investigate problems and handle privacy or content reports. Contact messages remain until deleted by the site operator; you may request deletion through the contact form.
Cookies and browser storage
The website currently uses the authentication cookie when you sign in. Tool favorites and up to eight recent tool identifiers are saved in local storage in your browser. These lists do not contain image files or filenames. Calculator share links include only the numeric settings and modes you choose to share. You can clear browser storage in your browser’s settings.
Advertising and Google services
Advertising and third-party analytics are currently disabled. No AdSense advertising script is loaded by this version of the site. If Google advertising is enabled later, this policy must reflect the actual configuration before ads are served.
When Google ads are served, Google and participating advertising partners may place or read cookies, use web beacons, and collect IP addresses or other identifiers to deliver ads, measure their performance and prevent abuse. Depending on the choices and consent available for your region, ads may be personalized. Learn how Google uses information from partner sites and manage Google advertising choices at My Ad Center.
Before introducing advertising, we will implement the applicable consent and privacy controls. Google requires a certified consent management platform for personalized ads served in the EEA, UK and Switzerland. A future consent interface must let you review and change your choices; a generic notice alone does not supply that functionality.
Sharing and protecting information
We do not sell account information or contact messages. Hosting and database services process information needed to operate the website. We may disclose information when required by a valid legal request. Password hashing, HTTP-only authentication cookies and parameterized database queries are used to protect account data. Public deployment must use HTTPS; no internet service can promise absolute security.
Access, correction and deletion
Available profile settings let you update supported account details. To request access to or deletion of account or contact data, contact the site operator. We may need to verify that you control the account before acting. Do not send passwords, payment details or private documents in a support message.
We will update this policy when data handling changes. The date above identifies the most recent update.